Description
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sparx Systems Pty | Sparx Pro Cloud Server | 6.0.163 | — |
Critical · 9.5
CVE-2025-15625
EUVD-2025-209515GHSA-cpjc-5x9w-83h8
Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server
Published Apr 17, 2026 · Updated Apr 17, 2026 · Assigned by NCSC-FI